CVE-2001-0415

REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain access to other accounts.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2001-06-27

Last modified

2024-08-08

Affected products

• Rediplus (Redi)

References

• http://archives.neohapsis.com/archives/bugtraq/2001-03/0275.html
• http://www.securityfocus.com/bid/2495
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6276